This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
File: P7eFXvMwunfZ87ct_97CBxKsFAc.mft (raw, json)
Hash identifier: kujkplUOoaJ/QgbEGFHAZJWp1Yq85kXDP7cF631uLJo=
Subject key identifier: 33:2F:25:DC:BE:FF:19:DF:0A:20:0E:F0:A2:DA:ED:98:8C:96:8F:51
Authority key identifier: 3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07
Certificate issuer: /CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
Certificate serial: 182E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
Manifest number: 1815
Signing time: Mon 22 Dec 2025 16:18:01 +0000
Manifest this update: Mon 22 Dec 2025 16:18:01 +0000
Manifest next update: Mon 29 Dec 2025 16:18:01 +0000
Files and hashes: 1: P7eFXvMwunfZ87ct_97CBxKsFAc.crl (hash: HYku4C+UKh4r0x4pIcC302LNdNPfxHvblzIYqkF3KOg=)
2: D9C4471C32D911F0B3466E0BC4F9AE02.roa (hash: kEqVolPWbZYybXeWnS2WqFsHodl52XHMAsJNtlbgCXo=)
3: 9BAC2C9C32D911F09D7CBD0AC4F9AE02.roa (hash: WA77dp8CFAMTuFtYEp44sxYc2n+DFG5Sigw0CHNE2Bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl
rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 16:18:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6190 (0x182e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD4DB, serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
Validity
Not Before: Dec 22 16:18:01 2025 GMT
Not After : Dec 29 16:18:01 2025 GMT
Subject: CN=69496f39-c05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:dc:a3:b8:cf:c7:54:d7:5d:34:31:2a:08:
97:a4:c1:be:20:71:8c:14:75:97:aa:33:f7:e3:c1:
62:7a:2b:79:9e:95:d1:67:ac:f0:e8:92:34:9c:ca:
29:db:24:65:b5:18:8d:c5:7f:36:52:9f:b5:2c:de:
71:de:5f:08:71:bc:6e:d4:41:25:bd:35:11:7b:aa:
8f:e2:9e:19:18:12:fc:69:c5:37:97:79:e6:b8:35:
df:8e:9d:86:57:b8:2a:79:66:8c:98:dc:c8:a8:57:
69:b5:7d:99:09:b3:68:88:31:bd:22:ca:6f:bb:9e:
38:f2:68:38:ca:7c:31:e9:f2:e7:57:fd:9c:16:57:
46:be:4c:f5:28:a2:a8:3e:83:ac:16:b0:cf:3f:68:
ce:06:31:c5:fd:e2:4b:72:26:ed:8a:1e:4d:56:19:
27:c9:7f:25:58:05:ea:bc:9c:9e:11:4b:65:ea:9c:
16:11:78:28:db:24:42:5e:de:a6:80:39:f2:d5:7f:
3b:cc:47:a3:af:a2:ef:92:f4:2c:99:6a:c2:da:68:
11:f3:75:a4:56:ad:fb:4c:34:cd:5c:db:20:a3:b7:
68:82:91:a9:1c:76:58:ff:dd:64:21:fb:a0:d4:18:
13:b3:9d:f6:5d:11:47:c8:ea:19:48:33:f0:e7:db:
9a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2F:25:DC:BE:FF:19:DF:0A:20:0E:F0:A2:DA:ED:98:8C:96:8F:51
X509v3 Authority Key Identifier:
keyid:3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8f:dc:b0:b3:2f:24:a2:28:af:52:d7:ae:88:68:0c:1e:98:
1b:88:74:56:63:19:a2:78:8e:c7:6a:08:a6:a6:b9:88:16:0d:
de:33:d0:98:f0:b0:14:6e:f8:33:12:a9:67:ae:07:a6:5b:f2:
f1:0c:c3:95:73:5d:a0:85:77:19:fe:7e:93:5a:89:60:78:c4:
1a:59:21:9f:df:04:39:e0:e8:3e:e1:b5:82:73:58:7b:d1:09:
36:45:57:9a:b4:c5:30:48:65:10:60:a7:d1:26:77:1d:74:30:
71:91:ca:4e:1a:96:71:83:fd:6c:0b:c5:0d:33:79:55:68:14:
81:fe:ab:96:4b:47:44:28:f8:09:10:04:e6:c6:82:bd:77:c6:
7d:b5:06:fd:7d:f5:50:47:7d:1d:b4:52:57:2d:96:10:14:3e:
c5:44:85:21:dd:38:10:51:a9:10:bd:36:8d:af:36:0e:c5:2b:
7b:0b:0e:42:ad:fe:34:b7:48:5b:1c:9c:95:ab:f6:cb:cb:ed:
f8:00:03:d8:d6:5c:96:ac:91:ae:a3:3e:59:92:21:78:f4:0b:
8e:08:19:46:a8:80:c1:26:cf:3e:53:1d:89:98:bb:a6:24:13:
96:77:fc:4b:d2:1d:08:5a:59:27:10:1e:d9:12:bb:1a:54:9f:
ae:cc:52:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 12:18:52 2025 by rpki-client